If you receive an email that appears to be from Amazon, but you're not sure, don't follow any links or open any attachments in the email. Instead, sign in to your AWS account or Amazon.com account to take action or view notifications.

If you're still not sure, ask yourself the following questions:

Does the subject of the email match the content of the email?

Are the grammar and spelling of the email correct? Incorrect grammar or spelling often indicates suspicious sources.

Does the email request a password or any other account-specific details about your Amazon account? Amazon and AWS will never request sensitive information over email.

Does the content of the email make sense in context? For example, if the email appears to be confirming a password reset, have you recently reset your password? If it appears to be requesting address information to complete an order, have you recently ordered anything from Amazon.com?

If you can answer "no" to one or more of the above questions, the email you received might be a spoofing email. For instructions about how to report potential email spoofing scams, see Report Suspicious Emails.